Answer vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1242 · ADVISORY
• answerdev/answer commit 90bfa0d · WEB
• answerdev/answer · PACKAGE
• huntr.dev/bounties/71c24c5e-ceb2-45cf-bda7-fa195d37e289 · WEB
• GitHub Advisory GHSA-qrwm-xqfr-4vhv · ADVISORY

github.com/answerdev/answer のその他の脆弱性

• CVE-2023-4815高 8.8Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.
• CVE-2023-4127中 5.9Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
• CVE-2023-4126高 8.8Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4125高 8.8Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.
• CVE-2023-4124中 6.5Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.